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FIG. 1 0A 
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FIG.10B 



WQ. 

JOIN GROUP CONTROLLER IN 
LOCAL NETWORK OF PLURAL 
REPLICATED GROUP 
CONTROLLERS 




1M2 

ESTABLISH SECURE CHANNEL 

BETWEEN FIRST GROUP 
CONTROLLER AND OTHERS 



1M2 
RECEIVE REQUEST 
FROM LOAD BALANCER 




MA 

RECEIVE DESIGNATION 
AS MASTER GROUP 
CONTROLLER 



imz 

IF NOT MASTER GROUP 
CONTROLLER, WAIT UNTIL 
DESIGNATED 



MS. 
GENERATE GROUP 
SESSION KEY AS NODE(S) 
JOIN, LEAVE 



IMS 

DISTRIBUTE GROUP SESSION 

KEY TO OTHER GROUP 
CONTROLLERS OVER SECURE 
CHANNEL 



FIG.10C 



1D2Q 

Group Controllers exchange Keep 
Alive messages and messages 
indicating which GC is Token 
Holder 
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1Q22 

Token Holding Group 
Controller goes down or 
releases the Token 



1H24 

Selected Group Controller (e.g., 
lowest, highest, earliest, latest) 
elects itself to be the next Token 
Holding Group Controller 



